I'm replacing 2 server 2003 DCs with 2 2012 R2 DCs. All 4 are in the domain still, the PDC is now one of the 2012s. Using either IE or Chrome, any https website throws a certificate error on the 2012 servers, but not on the 2003s. Additionally, most (but not all) of the new Windows 8 PCs in the domain show the same behaviour.
Viewing the certificates (e.g. for Google) checks OK; installing them reports success but doesn't cure the problem.
Time is synchronised to the PDC and appears accurate, at least to within a few seconds. Date is correct. 2012s have all available updates installed. The certificate stores are much more sparsely populated than on the old 2003s.
I've been banging at this for days & think I'm overlooking something really obvious. Any help will be appreciated.
I see error 1400 as follows, but think this might be a red herring:
Active Directory Web Services could not find a server certificate with the specified certificate name. A certificate is required to use SSL/TLS connections. To use SSL/TLS connections, verify that a valid server authentication certificate from a trusted Certificate Authority (CA) is installed on the machine.Certificate name: WS2012B.MYDOMAIN.LOCAL